Manager, Cybersecurity and Infrastructure

Company Description

Oxfam is a global organization that fights inequality to end poverty and injustice. We offer lifesaving support in times of crisis and advocate for economic justice, gender equality, and climate action. We demand equal rights and equal treatment so that everyone can thrive, not just survive.

Job Description

COORDINATES WITH

Oxfam International (OI) InfoSec Team, Affiliates Infrastructure Teams, Local and International Business Units and Staff, Business Applications Manage, Vendors and Consultants.

PURPOSE OF THE POSITION

The Cybersecurity and Infrastructure Manager lead and maintain the stability, security, and scalability of the organization’s IT systems. This role is responsible for day-to-day IT infrastructure operations, coordinate closely with our Managed Security Services Provider (MSSP), respond to security incidents, manage firewall and endpoint protections, and ensure adherence to security policies and procedures. In addition, the role supervises helpdesk operations and office infrastructure including procurement of AV/IT equipment.
This position is essential to maintaining a secure and efficient digital environment and provide support to a hybrid mission-driven workforce across multiple locations.

PRIMARY RESPONSIBILITIES

Cybersecurity and Risk Management (30%)
•Serve as primary liaison with Oxfam’s MSSP to monitor, report on, and resolve cybersecurity threats and vulnerabilities.
•Lead incident response efforts to security in collaboration with Senior Director of TIM, Oxfam America’s CISO as well as OI InfoSec Lead, ensuring proper investigation, documentation, analysis, and remediation.
•Maintain and ensure adherence and compliance of security policies, standards, and practices, including data privacy and acceptable use guidelines.
•Manage security infrastructure, such as firewalls and policies, and VPN access in line with global Oxfam security protocols and applicable regulatory requirements.
•Perform vulnerability scans, pen tests, and appropriate remediations.
•Manage and maintain backup and disaster recovery plans for in-office and cloud infrastructure.
•Responsible for conducting regular security audits and assessments.
•Develop, maintain, and continuously improve IT infrastructure documentation, including network diagrams, system architecture, configuration standards, asset inventories, and operational procedures.

Infrastructure Management (30%)
•Oversee the operation and maintenance of on-premise and cloud-based infrastructure, including network devices, servers, and backups.
•Maintain, administer and manage endpoint protection systems including Microsoft Intune, ensuring secure device provisioning, configuration, compliance, and lifecycle management.
•Manage and support 0365 environment for OUS.
•Oversee the organization's patch management program, ensuring timely deployment of operating system, application, firmware, and security updates across servers, endpoints, and network devices.
•Assess, maintain, and ensure the optimization of AV equipment and conference room technologies for seamless hybrid and in-person meetings experience, incorporating up-to-date tools and best practices.
•Ensure high quality system performance and troubleshoot issues as needed.
•Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
•Ensure high quality system performance and troubleshoot issues as needed.
•Collaborate with Oxfam’s global IT team on infrastructure initiatives and compliance.
•Lead the implementation of upgrades and improvements.

Helpdesk Staff Management and Technical Support (30%)
•Lead the helpdesk team effectively, ensuring timely and efficient technical support for staff as defined by our service level agreements
•Oversee ticket management and provide escalation support as needed.
•Ensure helpdesk staff follow established IT policies and procedures consistently. Implement and optimize end-user tools, account provisioning, and access controls systems.
•Ensure effective support for hybrid and in-person meetings, including the AV equipment and conference room technologies set-ups.

Procurement and Asset Management (10%)
•Lead assessment and procurement of IT hardware and software for new hires including upgrades, and replacements.
•Collaborate with key vendors to develop quotes for infrastructure services, review, negotiate, and provide recommendations.
•Maintain accurate inventory records and manage the IT lifecycle assets.

POSITION EXPECTATIONS

•Demonstrate Continuous Learning: Stays current with evolving enterprise technologies, system integration practices, and digital tools. Engage in ongoing learning and share insights with team members to improve implementation quality, systems, results, and business goals.
•Collaborate Across Teams: Build and maintain strong working relationships with both technical and non-technical colleagues, and external stakeholders to ensure successful implementation and adoption of systems. Proactively contribute to coordination efforts and foster mutual accountability in a hybrid and remote environment.
•Commit to Equity and Inclusion: Integrate a working knowledge of gender justice, racial equity, and inclusive practices in all aspects of project coordination and in system design. Supports equitable access to tools and information across the organization.

•Promote a Safe and Respectful Environment: Upholds Oxfam’s safeguarding standards and policies. Ensure data security and compliance in system and integration practices.
•Model a respectful, professional behavior and actively contribute to a safe, accountable, and collaborative environment for colleagues, partners, and the communities we serve.
•Drive Innovation and Technical Solutions: Brings creativity and technical insight to solve challenges through automation, integration, and optimization. Champions the use of modern platforms to enhance efficiency and user experience.

•Promote a Safe and Respectful Environment: Upholds Oxfam’s safeguarding standards and policies. Ensure data security and compliance in system and integration practices.
•Model a respectful, professional behavior and actively contribute to a safe, accountable, and collaborative environment for colleagues, partners, and the communities we serve.
•Drive Innovation and Technical Solutions: Brings creativity and technical insight to solve challenges through automation, integration, and optimization. Champions the use of modern platforms to enhance efficiency and user experience.

Qualifications

•BA or BS in Information Technology or Computer Science or equivalent combination of experience, education and training.

EXPERIENCE AND CORE COMPETENCIES

•5+ years of experience in IT infrastructure and cybersecurity roles, including team and vendor management.
•In-depth knowledge of networking principles, firewalls (e.g., Meraki), endpoint protection, cloud services (O365, Azure), and device management (e.g., Intune)
•Proficient in security operations, including incident response, vulnerability management, and familiarity with SIEM tools
•Hands-on experience with ticketing systems (e.g. Jira, Service-Now).
•Working knowledge of AV systems for conference rooms
•Excellent interpersonal skills; ability to communicate effectively, orally, in writing and presentation.
•Critical thinking and analytical capabilities with a solution-oriented mindset.
•Ability to operate independently and apply strategic thinking with technical depth.
•Expert-level in data, information and security standards, policies and architecture.
•Skilled in contract/vendor negotiation and relationship management.
•Experience in research, evaluation and technology strategy proposals.
•Experience in creating, modifying, and producing Policy and Procedural documentation.
•Proven experience with technology systems implementations and effectively liaise between IT and business partners.

PREFERRED QUALIFICATIONS

•Experience supporting non-profit, advocacy, or international development organizations.
•Experience with cloud platforms, architecture (Azure, AWS, PaaS, SaaS, O365, Box, etc.) and integrations.
•Knowledge and operational understanding of applicable privacy and security practices and laws (good understanding of PCI, PII, GDPR, HIPPA, etc.).
•Certification in: Azure, Cyber Security, ITIL

Additional Information

Oxfam America is a Gender Just organization and an equal opportunity employer. We welcome all qualified applicants and do not discriminate on the basis of race, color, gender, national origin, age, religion, creed, disability, veteran status, sexual orientation, gender identity, or gender expression. We provide reasonable accommodations to applicants with disabilities upon request.

Safeguarding & Conduct
Oxfam America is committed to providing a safe, respectful, and inclusive workplace for all. We have zero tolerance for any form of sexual exploitation, abuse, harassment, discrimination, or misconduct. All offers of employment are contingent upon satisfactory references and appropriate pre‑employment checks in line with Oxfam America’s Safeguarding Policy. As a participant in the Inter‑Agency Misconduct Disclosure Scheme (MDS), we may request information from previous employers regarding findings or investigations related to SEAH‑related misconduct.

Recruitment Fraud Warning
Oxfam America never requests payment, bank information, or personal financial details from candidates at any stage of the recruitment process.

E‑Verify
We are an E‑Verify employer.

For more information:

• E-Verify Participation Poster: English / Spanish
• E-Verify Right to Work Poster: English | Spanish